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This listing of claims will replace all prior versions and listings of claims in the application. 
Listing of Claims: 

Claim 1 (Currently Amended): A method comprising: 

capturing network packets from a network using a plurality of distributed agents 
positioned at different locations within the network : 

communicating the network packets to an analyzer coupled to the network: 

identifying duplicate network packets that were captured by the plurality of agents at the 
different aget*te locations : and 

displaying a 3ubs e t of the, duplicate network packets or non-duplicate network packets 
based on the identification. 



Claim*2^(CiiM^^^ method of claim 1, wherein displaying a subset of the 

non-duplicate network packets comprises: 

displaying the non-duplicate network packets; and 

displaying a representative packet for the duplicate packets. 

Claim 3 (Currently Amended): The method of claim 4- 2, wherein displaying a 
representative packet comprises: 

comparing timestamps of the duplicate packets, and 

displaying one of the packets based on the comparison. 

Claim 4 (Currently Amended) : The method of claim 1 , wherein displaying a oubsot of the 
duplicate network packets further comprises: 

filtering the non<iuplicate packets; and 

displaying the duplicate packets. 
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Claim 5 (Currently Amended): A method comprising: 

capturing network packets from a network using a plurality of distributed agents 
positioned at different locations within the network: 

communicating the captured network da& packets to an aggregator coupled to the 
network: and 

aggregating the captured network packets into sets of network packets based on source 
information and destination information for the network packets* 

wherein aggregating the captured network packets comprises sorting the network packets 
based on t imestamps of the network packets, assigning the network packets having equal source 
information and equal destination information to a common set and identifying duplicate packets 
within the sets of network packets that were captured by the plurality of distributed agents at the 
different locations . 

Claim 6 (Cance)ed). 

Claim^CCuiTently Amended): The method of claim 6 5, further comprising displaying a 
subset of the network packets based on the identification. 

Claim 8 (Currently Amended): The method of claim 6 5, wherein identifying duplicate 
packets comprises: 

identifying network packets having equal sequence numbers and acknowledgement 
numbers; and 

performing a byte-by-byte comparison for payloads of the identified packets. 

Claim 9 (Original): The method of claim 5, wherein the source information comprises one of a 
media access control (MAC) address and a Data Link Control (DLC) address for a source 
network device. 
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Claim 10 (Original): The method of claim 5, wherein the destination information comprises one 
of a media access control (MAC) address and a Data Link Control (DLC) address for a 
destination network device. 

Claim 1 1 (Currently Amended): The method of claim 6 5, further comprising displaying 
non-duplicate data packets of one of the sets of network packets . 

Claim 12 (Currently Amended): The method of claim 1 1 , wherein displaying Eton- 
duplicativ e non-duplicate packets comprises displaying a representative packet for the duplicate 
packets. 

Claim 13 (Original): The method of claim 1 1 , wherein displaying a representative packet 
comprises: 

comparing timestamps of the dupl icate packets, and 
displaying one of the packets based on the comparison. 

Claim 14 (Currently Amended): A method comprising: 

capturing network packets from a network using a plurality of distributed agents 
positioned at different locations within the network ; 

communicating the captured network data packets to an aggregator coupled to the 
network; 

aggregating the captured network packets into sets of network packets based on source 
information and destination information for the network packets; and 

graphically illustrating the set sets of aggregated network packets; 

selecting one of the sets of aggregated network packets in response to user input; and 

displaying the packets of the selected set bv identifying duplicate packets within the sets 
of network packets that were captured bv the plurality of distributed agents at the different 
locations, and displaying non-duplicate packets of the selected set 

Claim 15 & 16 (Canceled). 
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Claim 1 7 (Currently Amended): The method of claim 44 14, further comprising displaying a 
representative packet for the duplicate packets. 

Claim 18 (Original): The method of claim 17, wherein displaying a representative packet 
comprises: 

comparing tirnestamps of the duplicate packets, and 
displaying one of the packets based on the comparison. 

Claim 1 9 (Currently Amended): The method of claim 1 7, further comprising displaying *he 
a remainder of the duplicate packets not selected to be the representative packet in response to 
user input. 

Claim 20 (Currently Amended): The method of claim 17, further comprising: 

displaying an expandable graphical icon proximate the representative packet for the 

duplicate packets; and 

displaying the a remainder of the duplicate packets based on user input selecting the 

expandable graphical icon. 

Claim 21 (Original): The method of claim 14, wherein capturing network packets comprises 
communicating start and stop commands from the aggregator to the agents. 
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Claim 22 (Currently Amended): A system comprising: 

a plurality of distributed agents positioned at different locations within a network to 
capture packets from a the network; 

an aggregation module coupled to the network to receive the captured packets, wherein 
the aggregation module identifies duplicate packets that were captured by the plurality of 
distributed a gents at the different agen t s locations : and 

a display coupled to the aggregation module, wherein the aggregation module presents the 
non-duplicate network packets and_a selected representative packet for the duplicate packets on 
the display. 

Claim 23 (Canceled). 

Claim 24 (Currently Amended): The system of claim 2$ 22, wherein the agents assign the 
captured packets timcstamps, and further wherein the aggregation module compares the 
timestamps of the duplicate packets and selects one of the duplicate packets for display as the 
' representative packet. 

Claim 25 (Currently Amended) : The system of claim 32 22, wherein the aggregation module 
displays th e presents a remainder of the duplicate packets not selected to be the representative 
packet on the display in response to user input selecting the representative packet. 

Claim 26 (Original): The system of claim 22, wherein the aggregation module identifies 
duplicate packets by identifying packets having equal sequence numbers and acknowledgement 
numbers, and by performing a byte-by-byte comparison for payloads of the identified packets. 

Claim 27 (Original): The system of claim 22, wherein the aggregation module assigns the 
captured packets into sets of packets based on source information and destination information for 
the packets. 
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Claim 28 (Original): The system of claim 22, wherein the agents assign the captured packets 
timestamps and the aggregation module sorts the packets based on timestamps, and further 
wherein the aggregation module assigns the packets having equal source information and equal 
destination information to a common set of packets. 

Claim 29 (Original): The system of claim 28, wherein the source information comprises one of 
a media access control (MAC) address and a Data Link Control (DLC) address for a source 
network device. 

Claim 30 (Original): The system of claim 28, wherein the destination information comprises 
one of a media access control (MAC) address and a Data Link Control (DLC) address for a 
destination network device/ 

Claim 3 1 (Original): The system of claim 22, further comprising a controller that maintains a 
communication link with each of the agents, wherein the controller issues commands to the 
agents via the communication link to initiate and terminate data capture by the agents. 

Claim 32 (Currently Amended): A computer-readable medium comprising instructions to 
cause a processor to: 

direct a plurality of distributed agents' positioned at different locations within a network to 
capture packets from a the network; 

receive the captured packets with an analyzer coupled to the network : 

identify one or more sets of duplicate network packets that were captured by the plurality 
of agents at the different ageete locations : 

display the non-duplicate network packets; and 

display on e of th e a selected representative packet for each set of duplicate packets. 



-7- 

PAGE 9f22 ^ RCVD AT 8/17/2006 4:20:35 PM [Eastern Daylight TimeJ * SVR:USPT0€FXRF-2/11 4 DNlS:2738300 ^ CSID:6517351102 ^ DURATION (mm-ss):07-06 



08/17/2086 14:13 6517351102 



SHUMAKER & SIEFFERT 



PAGE 10/22 



Application Number 10/057,576 

Response to Office Action mailed May 17 a 2006 

Claim 33 (Original): The medium of claim 32, further comprising instructions to cause the 
processor to: 

compare timestamps of the duplicate packets, and 
display one of the packets based on the comparison. 

Claim 34 (Currently Amended): The medium of claim 32, further comprising instructions to 
cause the processor to: 

identify network packets having equal sequence numbers and acknowledgement numbers 
as duplicate packets : and 

perform a byte-by-byte comparison for payloads of the identified packets. 

Claim 35 (Original): The medium of claim 32, further comprising instructions to cause the 
processor to aggregate the captured network packets into sets of network packets based on source 
information and destination information for the network packets. 

Claim 36 (Currently Amended): The medium of claim 35, further comprising institutions to ' 
cause the processor to sort the network packets based on timestamps of the network packets, 
assign the network packets having equal source information and equal destination information to 
a common set, and identify duplicate packets within the sets of network d t t p Me at e packets that 
were captured by the plurality of agents at the different agents locations . 

Claim 37 (Currently Amended): The medium of claim 35, further comprising instructions to 
cause the processor to graphically illustrate the set sets of aggregated network packets. 

Claim 38 (Currently Amended): The medium of claim 37, further comprising instructions to 
cause the processor to: 

select one of the sets of aggregated network packets in response to user input; and 

display the packets of the selected set 
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